Not able to access shared folders after user migration

• Monday, December 24, 2012 1:13 PM

   

   
  

  0

   

  I are facing an issue where users are not able to access the shares after
  they have been migrated to the target domain.

  

   

  In the above diagram we have two source domain and one target domain, the
  users from Source 1 are able to access the shares on the source domain after
  migration to the Target domain however this is not the case with the Source 2
  users. They get a prompt to provide user name and password when they try to
  access the shared folder on the Source 2 DC, more surprisingly the credential
  also don’t work, neither from Target not from Source 2

  The users are member of a group which has a permission on the shared folder,
  the Groups are also migrated to the target domain alone with their SID Histories
  and the user access token also contains the SID. (User access token in Green below)

  The user is using window XP machine to logon and access the shares, however
  when we tried the same user login to a windows 2k8 sever and accessed the share
  it was working.

  Note: the win 2k8 server is already on the Target domain whereas the client
  win xp machine has been newly migrated to the new domain in the migration
  process.

  The Group Source
  2\Migration-FileShare-Test-DL gets migrated to the
  target domain as
  Target\Migration-FileShare-Test-DL-RCG which
  has the SID of the Target\Migration-FileShare-Test-DL group in
  its SID History. The user is a member of the group in the source domain and also
  in the target domain.

  One highlighted in yellow is the SID for Source
  2\Migration-FileShare-Test-DL

  Access Token for the user

  Username =
  AmyH

  TS Session ID:
  4

  User

     
  S-1-5-21-1421919476-1861090634-2614085446-1002425

  Groups:

  00  
  S-1-5-21-1421919476-1861090634-2614085446-513         Attributes - Mandatory
  Default Enabled

  01   S-1-1-0  
                                              Attributes - Mandatory Default
  Enabled

  02  
  S-1-5-32-545                                          Attributes - Mandatory
  Default Enabled

  03  
  S-1-5-32-554                                          Attributes - Mandatory
  Default Enabled

  04   S-1-5-2  
                                              Attributes - Mandatory Default
  Enabled

  05   S-1-5-11 
                                              Attributes - Mandatory Default
  Enabled

  06   S-1-5-15 
                                              Attributes - Mandatory Default
  Enabled

  07  
  S-1-5-5-0-238314018                                   Attributes - Mandatory
  Default Enabled LogonId

  08  
  S-1-5-21-1421919476-1861090634-2614085446-1002433     Attributes - Mandatory
  Default Enabled

  09  
  S-1-5-21-1421919476-1861090634-2614085446-1002434     Attributes - Mandatory
  Default Enabled

  10  
  S-1-5-21-1373731602-3536139840-1206636429-48219       Attributes - Mandatory
  Default Enabled

  11  
  S-1-5-21-1373731602-3536139840-1206636429-50054       Attributes - Mandatory
  Default Enabled

  12  
  S-1-5-21-40218438-1539389625-985433658-34730          Attributes - Mandatory
  Default Enabled

  13  
  S-1-5-21-362788745-1516629465-3126525450-23021        Attributes - Mandatory
  Default Enabled

  14  
  S-1-5-21-1421919476-1861090634-2614085446-1002435     Attributes - Mandatory
  Default Enabled

  15  
  S-1-5-21-362788745-1516629465-3126525450-23078        Attributes - Mandatory
  Default Enabled

  16  
  S-1-16-8192                                Attributes - Primary Group:
  S-1-5-21-1421919476-1861090634-2614085446-513

  Privs

  00 0x000000006
  SeUnsolicitedInputPrivilege       Attributes - Enabled Default

  01 0x000000017
  SeChangeNotifyPrivilege           Attributes - Enabled Default

  02 0x000000021
  Unknown Privilege                 Attributes - Enabled Default

  Auth ID 
  0:e3462d8

  Impersonation
  Level:  Identification

  TokenType 
  Impersonation

  Please let me know what can be the possible issues here, also please let me
  know if anyone of you need any more information on this. Any help would be
  highly appreciated.

  ---

  Regards, Krishnakant 

  
  

  • Edited by Krishnakant MahamuniMicrosoft Employee Monday, December 24, 2012 1:14 PM
  •  
  • Reply
  • Quote